Lumenstat now runs at app.lumenstat.com, and any Stellar project can enroll itself.

Website analytics come from a patched Umami with no cookies, no stored IP addresses, country-only locations and a daily salt that is deleted after 48 hours.

Every event passes four checks before it counts: a real browser on your own domain, a proof of work from the tracker, an address outside known data centers, and a sane number of new visitors per network. Events that fail are kept apart as flagged, so you and SCF operators can see attempts to inflate your numbers.

The tracker lives at a versioned URL with an integrity hash, so the file you embed cannot change under you. APIs can add a second OpenTelemetry exporter; Lumenstat keeps request counts, status codes and latency per route, and drops the traces.

Docs are at docs.lumenstat.com.